Update module github.com/nats-io/nats-server/v2 to v2.9.21

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github.com/nats-io/nats-server/v2	replace	patch	v2.9.19 -> v2.9.21

---

Release Notes

nats-io/nats-server (github.com/nats-io/nats-server/v2)

v2.9.21

Compare Source

Changelog

Go Version

• 1.19.12

Dependencies

• github.com/klauspost/compress v1.16.7
• github.com/nats-io/nats.go v1.28.0
• go.uber.org/automaxprocs v1.5.3
• golang.org/x/crypto v0.11.0
• golang.org/x/sys v0.10.0

Added

OCSP

• Add fetch, cache, and verification of client CA's OCSP Response for NATS, WebSocket, and MQTT client mTLS connections (#​4362, backported from 2.10)
• Add bi-directional fetch, cache, and verification of CA OCSP Response for LEAF connections (#​4362, backported from 2.10)

See ADR-38 OCSP Peer Verification

General

• Add UTC log timestamp option (#​4331, backported from 2.10)

Improved

JetStream

• Don't error to server logs if message was deleted for consumer (#​4328)
• Improve publish performance for zero-interest subjects (#​4359) Thanks to @​antlad for reporting the issue!
• Sync and reset message rejected count to ensure replicas don’t incorrectly discard messages (#​4365, #​4366)

Fixed

General

• Leaking memory on usage of getHash() (#​4329) Thanks to @​VuongUranus for reporting the issue!
• Server reload with highly active accounts and service imports could cause panic or dataloss (#​4327)
• Fix detection of an unusable configuration file (#​4358)
• Fix a few system service imports going missing after configuration reload (#​4360)

OCSP

• Fix local-determination of issuer CA at startup (#​4362)
• Remove constraint that all (super)cluster node peers must be issued by the same CA (#​4362)

Embedded

• Don't require TLS for in-process client connection (#​4323)

JetStream

• Fix serializability guarantee for concurrent publish when using expected-last-subject-sequence (#​4319)
• Report correct consumer count in paged list response (#​4339)
• Fix not validating single token filtered consumer (#​4338)
• Fix stream recovery of message block with sequence gaps (#​4344)
• Fix panic when re-calculating first sequence of SimpleState info (#​4346)
• Fix stream store accounting drift (#​4357)

Complete Changes

v2.9.20

Compare Source

Changelog

Go Version

• 1.19.11

Added

Windows

• Backport 2.10 support for native Windows certificate store (#​4268)

Improved

Accounts

• Allow advisories to be exported/imported across accounts (#​4302)

JetStream

• Optimize consumer create time on streams with a large number of blocks (#​4269)

Fixed

Gateways

• Protect possible data race when reloading accounts (#​4274)

Leafnodes

• Prevent zombie subscriptions which could lead to silent data loss when using queue subscriptions (#​4299)

WebSocket

• Prevent reporting tls_required when tls_available is not set (#​4264)

JetStream

• Prevent corrupting streams actively being restored during health check (#​4277) Thank you @​vitush93 for the report!
• Prevent encrypted data attempting to be decrypted with an empty key (#​4301)

MQTT

• Ensure republished messages from streams are received by MQTT subscriptions (#​4303)

Complete Changes

---

Configuration

📅 Schedule: Branch creation - "after 6am on thursday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.